Privacy Policy

This policy covers personal information about visitors, account holders, and customers of this site. It does not cover the practices of any third-party site you reach from a link here, and it does not cover information that has been aggregated or de-identified so that it can no longer reasonably be linked to you.

Where this policy uses terms defined by the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”), those terms carry their statutory meaning.

In the twelve months before the date at the top of this page we have collected the categories of personal information listed below. The category names are the ones used by the CCPA, and only the categories listed here are collected.

• Identifiers. Name, shipping and billing address, email address, telephone number where you give one, account login identifier, order number, IP address, and device and browser identifiers.
• Customer records and payment information (California Civil Code section 1798.80). The name and address associated with an order, and the card brand, expiration, and last four digits returned to us by the payment processor. Full payment card numbers are entered into the processor and are never stored on our servers.
• Commercial information. Products viewed and purchased, order and return history, cart contents, recurring-order selections, promotion or referral codes applied, and support requests relating to an order.
• Internet or other electronic network activity. Pages requested on this site, the referring page, searches run inside our catalog, browser and device characteristics, and the session or cart identifier stored in your browser.
• Geolocation data. Approximate, city-level location inferred from your IP address, and the postal address you choose to give us for delivery. We do not collect device GPS location.
• Professional or employment-related information. For wholesale or institutional applicants: business or institution name, role, business contact details, and whatever you provide in support of the application.
• Audio, electronic, or similar information you send us. The content of emails, on-site chat messages, and any product review you choose to post, together with the identifiers attached to them.
• Inferences. Limited inferences drawn from your order history, such as which catalog categories are relevant to you for a follow-up email. We do not build behavioral advertising profiles, and we do not use automated decision-making that produces legal or similarly significant effects.

Sensitive personal information. We do not collect sensitive personal information as the CCPA defines it. We do not ask for government identification numbers, precise geolocation, racial or ethnic origin, religious beliefs, union membership, genetic or biometric data, or health information, and we do not use any information we hold to infer characteristics about you.

Research-use acknowledgments. Because this catalog is research-use-only, we keep a record that you confirmed the research-use terms and that you meet the age requirement, together with the date, IP address, and browser user agent of that confirmation. The record exists so that either side can evidence what was acknowledged and when.

• Directly from you. When you create an account, place an order, enter a delivery address, contact support, apply for a wholesale account, post a review, or confirm the research-use terms.
• Automatically from your device. Server logs and first-party cookies or local storage record your IP address, browser and device characteristics, the pages you request, and the cart or session identifier that keeps your cart intact between pages.
• From our service providers. The payment processor returns the outcome of a charge together with the card brand, expiration, and last four digits. Shipping carriers return tracking and delivery events. Our email provider returns delivery, bounce, and unsubscribe signals.
• From a referral link. If you arrive through a referral link we record the referral code, the page you landed on, the referring page, your IP address, and your browser user agent, so that the referral can be credited if you order.

Each category is used for the business and commercial purposes below, and for no incompatible purpose without telling you first.

• To fill your order. Identifiers, customer records, commercial information, and the delivery address are used to take payment, pick and pack the order, produce a shipping label, and send order and tracking notifications.
• To operate accounts and support. Identifiers and the content of your messages are used to authenticate you, answer support requests, process returns and refunds, and keep a record of what was agreed.
• To keep the site and orders secure. Network activity, IP address, and device characteristics are used to detect fraud, card testing, credential stuffing, and other abuse, and to enforce our Terms of Service.
• To meet legal and compliance obligations. Order, tax, and acknowledgment records are used to satisfy accounting, tax, and recordkeeping obligations, to respond to lawful requests, and to evidence that the research-use terms were presented and accepted.
• To maintain and improve the site and catalog. Aggregated commercial and network activity is used to understand which products and pages are useful, to diagnose defects, and to plan inventory.
• To send messages you asked for. Email address and order history are used for order notifications. Order notifications are transactional and continue for as long as you have an open order.

We disclose personal information to service providers and contractors who process it on our behalf, under contracts that limit them to our instructions and forbid them from using it for their own purposes. In the twelve months before the date at the top of this page, we disclosed the categories below for a business purpose:

• Payment processing. Identifiers and payment information, to our PCI-compliant payment processor, to authorize and settle charges and to investigate disputes and chargebacks.
• Order fulfillment and delivery. Identifiers and the delivery address, to our fulfillment platform and to the carrier that carries the parcel.
• Email delivery. Identifiers and commercial information, to the provider that sends our order and account email.
• Hosting, database, and error monitoring. Any category, to the extent it passes through the infrastructure that runs this site.
• Authentication. Identifiers, to the identity provider that manages sign-in and credentials.
• Bot prevention. Network activity and device characteristics, to Cloudflare Turnstile, to distinguish people from automated abuse.
• Professional advisers and authorities. Any category, where disclosure is needed to obtain legal or accounting advice, to comply with a law or valid legal process, or to protect the rights, property, or safety of our customers or of LabChecked Inc.
• A successor in a business transfer. If all or part of the business is merged, acquired, or reorganized, customer records may transfer as part of that transaction, subject to this policy.

Beyond the recipients above we do not disclose personal information to third parties for those parties to use for their own purposes, and we do not disclose it to anyone for their direct marketing.

A product review you choose to post is published on this site and is visible to anyone who visits it. Do not put anything in a review that you do not want to be public.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as the CCPA defines “sell” and “share.” We have not done so in the twelve months before the date at the top of this page. We do not sell or share the personal information of consumers we know to be under sixteen years of age. There is accordingly nothing for you to opt out of, and we do not operate a “Do Not Sell or Share My Personal Information” mechanism because no sale or sharing takes place. If that ever changes we will update this policy and provide the opt-out before the change takes effect.

We likewise do not use or disclose sensitive personal information for any purpose that would give you a right to limit that use, because we do not collect sensitive personal information.

We do not keep personal information for a single fixed period. Each category is kept for as long as the criteria below apply to it, and is then deleted or de-identified.

• Account records. Kept for the life of the account. If you close it, identifiers are kept for a limited further period so that we can resolve any open order, dispute, or fraud investigation.
• Order, payment, and refund records. Kept for the period our tax, accounting, and business-records obligations require, and after that for as long as a related dispute, chargeback, or legal claim can still be brought.
• Research-use acknowledgments. Kept for as long as the orders they relate to are kept, because their only purpose is to evidence what was acknowledged and when.
• Support and message history. Kept while the matter is open and for a limited period afterwards, so that a later contact about the same order has its context.
• Marketing contact details. Kept until you unsubscribe or ask us to delete them. After an unsubscribe we keep the minimum record needed to be sure you are not added back to the list.
• Security, server, and audit logs. Kept for a short operational period for security and troubleshooting, then deleted or aggregated.

We use cookies and similar browser storage only where they are needed to operate the site. We do not use third-party analytics, advertising cookies, or cross-site trackers, and no third party tracks you across other websites from here.

The storage this site sets falls into these groups:

• Strictly necessary. Sign-in and session security, the contents of your cart, checkout state, and protection against fraud and automated abuse.
• Functional. Preferences you set, such as display theme, and the record that you have already acknowledged the research-use notice so that you are not asked again on every page.
• Referral attribution. If you arrive through a referral link, a first-party identifier ties your cart to that referral so the referrer can be credited. It is not used to profile you and it is not disclosed for advertising.

You can block or delete this storage in your browser settings. Blocking strictly necessary storage will stop sign-in and checkout from working.

Order confirmations, shipping notifications, refund notices, and replies to your support requests are transactional messages about a transaction you started, and they are not marketing.

Marketing email is sent only where you have asked for it. Every marketing email carries an unsubscribe link, and unsubscribing stops marketing email without affecting transactional messages about your orders.

Subject to verification and to the exceptions the law allows, you have the following rights over your personal information:

• Right to know and to access. To be told the categories of personal information we have collected about you, the sources, the business or commercial purposes, and the categories of recipients, and to receive a copy of the specific pieces of personal information we hold. You may make this request up to twice in a twelve-month period.
• Right to delete. To ask us to delete the personal information we collected from you. We may keep what we still need to complete a transaction you asked for, to detect and act against fraud or security incidents, to comply with a legal obligation such as tax recordkeeping, or to exercise or defend a legal claim. Where we keep something for one of those reasons we will tell you which one.
• Right to correct. To ask us to correct inaccurate personal information, taking into account its nature and the purpose we hold it for.
• Right to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of. The right remains available to you if that ever changes.
• Right to limit the use of sensitive personal information. We do not collect sensitive personal information, so there is no such use to limit.
• Right to non-discrimination. We will not deny you goods or services, charge you a different price, or give you a lower quality of service because you exercised a privacy right. We do not offer financial incentives in exchange for personal information.

Send your request to support@labchecked.com with the word PRIVACY in the subject line. Tell us which right you are exercising, and give us the email address you use on the site and, where the request concerns an order, the order number.

How we verify you. We verify a request by matching the information in it against information we already hold, normally the email address on the account or on the order, and by confirming the request from that email address. For a request to receive specific pieces of personal information we may ask for one additional matching data point. We ask only for what is needed to verify you, we do not use it for anything else, and we do not keep it beyond the verification. If we cannot verify you we will tell you, and we may decline the request.

Authorized agents. An authorized agent may submit a request on your behalf if they provide written permission signed by you, or a valid power of attorney. We may still contact you directly to confirm that you gave permission and to verify your identity.

How long we take. We confirm receipt of a request within ten business days and respond within forty-five calendar days. If we need more time we will tell you why within that period and take up to a further forty-five days. There is no charge for a request unless it is manifestly unfounded or excessive, in which case we will explain the reason before doing anything.

If we deny a request in whole or in part we will explain why, and you may reply to the same address to ask us to reconsider.

We honor the Global Privacy Control. If your browser or an extension sends a GPC signal, we honor it as a valid request to opt that browser out of any sale or sharing of personal information, and we do not override it. Because we do not sell or share personal information, the signal changes nothing about how your information is handled here. We honor it so that the position stays correct if our practices ever change.

If you are a California resident, the CCPA gives you the rights listed in section 10, and sections 2 through 7 are the notice at collection the CCPA requires: the categories of personal information we collect, the sources, the purposes, the categories of recipients, and the criteria we use to decide how long each category is kept.

We do not sell or share personal information and we do not collect sensitive personal information, as stated in section 6. We do not disclose personal information to third parties for their own direct marketing, so there is nothing to request under California Civil Code section 1798.83, sometimes called the Shine the Light law.

You may designate an authorized agent to make a request for you, as described in section 11, and you will not be treated differently for exercising any of these rights.

Residents of other states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana, have comparable rights of access, correction, deletion, portability, and opt-out. We apply the process in section 11 to those requests as well. If we deny your request you may appeal by replying to the same address, and we will respond to the appeal in writing within the period your state law allows. If we deny the appeal, you may complain to your state attorney general.

This site is intended for qualified researchers and institutions and is not directed to children. You must be at least 18 years old to create an account or place an order. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, write to us and we will delete it.

We operate in the United States, and your information is processed and stored in the United States by us and by our service providers. If you use this site from outside the United States, you understand that your information will be transferred to, and handled in, a country whose data protection laws may differ from those where you live.

Traffic to this site is encrypted in transit. Access to customer records is limited to the people who need it to run the business and is controlled through individual accounts. Full payment card numbers are handled by our PCI-compliant payment processor and are never stored on our servers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

If we change this policy we will post the revised version here and update the date at the top of the page. Where a change materially affects how we handle personal information we already hold, we will give notice before it takes effect.

Questions about this policy, or a privacy request, may be directed to support@labchecked.com or (786) 396-8971.